Lucene search

K
exploitdbMichal CiharEDB-ID:26199
HistoryAug 28, 2005 - 12:00 a.m.

phpMyAdmin 2.x - 'error.php' Cross-Site Scripting

2005-08-2800:00:00
Michal Cihar
www.exploit-db.com
24

AI Score

7.4

Confidence

Low

source: https://www.securityfocus.com/bid/14675/info

phpMyAdmin is prone to a cross-site scripting vulnerability.

This issue may be exploited to steal cookie-based authentication credentials from legitimate users of the software. Such an attack would require that the victim follows a malicious link that includes hostile HTML and script code. 

/error.php?error=%3Cscript%3Ewindow.alert('a')%3C/script%3E 

AI Score

7.4

Confidence

Low